Hi I've just noticed that my server is being hammered by the www.puritysearch.net bot. I've been reading about fail2ban but am unable to find a guide on how to set it up on a Ubuntu 8.04/ISPConfig 2 server. This is a production server so I'm wary of messing things up. What do I need to do to block www.puritysearch.net? Will following these this guide answer my needs: http://www.howtoforge.com/fail2ban_debian_etch Am I even on the right track here? Any pointers will be appreciated.
The howto will help you .. alternatively you could use iptables directly (fail2ban uses iptables) to get the job done.. Code: iptables -A INPUT -s www.puritysearch.net -j DROP will block everything from that ip address Code: iptables -D INPUT -s www.puritysearch.net -j DROP wil remove the rule again ..
